v2tbscertlistgenerator.java

来自「《移动Agent技术》一书的所有章节源代码。」· Java 代码 · 共 139 行

package org.bouncycastle.asn1.x509;

import java.util.Vector;
import java.util.Enumeration;

import org.bouncycastle.asn1.*;

/**
 * Generator for Version 2 TBSCertList structures.
 * <pre>
 *  TBSCertList  ::=  SEQUENCE  {
 *       version                 Version OPTIONAL,
 *                                    -- if present, shall be v2
 *       signature               AlgorithmIdentifier,
 *       issuer                  Name,
 *       thisUpdate              Time,
 *       nextUpdate              Time OPTIONAL,
 *       revokedCertificates     SEQUENCE OF SEQUENCE  {
 *            userCertificate         CertificateSerialNumber,
 *            revocationDate          Time,
 *            crlEntryExtensions      Extensions OPTIONAL
 *                                          -- if present, shall be v2
 *                                 }  OPTIONAL,
 *       crlExtensions           [0]  EXPLICIT Extensions OPTIONAL
 *                                          -- if present, shall be v2
 *                                 }
 * </pre>
 *
 * <b>Note: This class may be subject to change</b>
 */
public class V2TBSCertListGenerator
{
    DERInteger version = new DERInteger(1);

    AlgorithmIdentifier     signature;
    X509Name                issuer;
    DERUTCTime              thisUpdate, nextUpdate=null;
    X509Extensions          extensions=null;
    private Vector          crlentries=null;

    public V2TBSCertListGenerator()
    {
    }


    public void setSignature(
        AlgorithmIdentifier    signature)
    {
        this.signature = signature;
    }

    public void setIssuer(
        X509Name    issuer)
    {
        this.issuer = issuer;
    }

    public void setThisUpdate(
        DERUTCTime thisUpdate)
    {
        this.thisUpdate = thisUpdate;
    }

    public void setNextUpdate(
        DERUTCTime nextUpdate)
    {
        this.nextUpdate = nextUpdate;
    }


    public void addCRLEntry(
        DERConstructedSequence crlEntry)
    {
        if (crlentries == null)
            crlentries = new Vector();
        crlentries.addElement(crlEntry);
    }

    public void addCRLEntry(DERInteger userCertificate, DERUTCTime revocationDate, int reason)
    {
        DERConstructedSequence seq = new DERConstructedSequence();
        seq.addObject(userCertificate);
        seq.addObject(revocationDate);
        if (reason != 0)
        {
            ReasonFlags rf = new ReasonFlags(reason);
            DERConstructedSequence eseq = new DERConstructedSequence();
            eseq.addObject(X509Extensions.ReasonCode);
            eseq.addObject(rf);
            X509Extensions ex = new X509Extensions(eseq);
            seq.addObject(ex);
        }
        if (crlentries == null)
            crlentries = new Vector();
        crlentries.addElement(seq);
    }

    public void setExtensions(
        X509Extensions    extensions)
    {
        this.extensions = extensions;
    }

    public TBSCertList generateTBSCertList()
    {
        if ((signature == null) || (issuer == null) || (thisUpdate == null))
        {
            throw new IllegalStateException("Not all mandatory fields set in V2 TBSCertList generator.");
        }

        DERConstructedSequence  seq = new DERConstructedSequence();

        seq.addObject(version);
        seq.addObject(signature);
        seq.addObject(issuer);

        seq.addObject(thisUpdate);
        if (nextUpdate != null)
            seq.addObject(nextUpdate);

        // Add CRLEntries if they exist
        if (crlentries != null) {
            DERConstructedSequence certseq = new DERConstructedSequence();
            Enumeration it = crlentries.elements();
            while( it.hasMoreElements() ) {
                certseq.addObject((DERConstructedSequence)it.nextElement());
            }
            seq.addObject(certseq);
        }

        if (extensions != null)
        {
            seq.addObject(new DERTaggedObject(0, extensions.getDERObject()));
        }

        return new TBSCertList(seq);
    }
}